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REPORT OF THE USCIB COORDINATOR 
TO THE 

UNITED STATES COMMUNICATIONS MMUgmCB BOARD 

OH 

fortusuese cot.aamiCATiow security 



THE FROBIElf 

1. To study and evaluate Portuguese communications security and its bear- 
ing on the security of North Atlantic Treaty Organisation (NATO) and V.S. 

t 

classified information. 

PACTS BEARING ON THE PROBLEM AND DISCUSSION 

2. See Enclosure. 



CONCLUSIONS 



EO 3.3 (h) (2) 
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3. It is concluded that 
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EO 3.3 (h) (2) 

d. The Portuguese authorities responsible for the production and use 
of its cryptosystems show great ignorance and naivete In the whole field 
of cryptology. In fact, they appear to be not only wholly unaware that 
their communications are open to rather easy reading by eryptanalytic 
processes, but also there is reason to believe that certain high officials 
are completely unaware of the existence of such a science as cryptanalysis. 



f . Portuguese corsmirtic ationa Insecurity may soon become a natter of 
serious concern as NATO develops arid the Portuguese become more involved 
in NATO affaire, because of (1) their failure to take adequate CGKSEC 
precautions to safeguard NATO information in their national connunications, 
(2) their insecure practices in connection with the use of the TTPEX 
machines furnished them by the C.K., thus jeopardizing not only their own 
TTPEX NATO communications but also the TTPEX communications of other NATO 
members, and (3) their suspicions with regard to British issuance of 
TTPEX and keys thereto, which suspicions lead them to transmit certain 
NATO infomation in their own insecure national system. 

£. The Portuguese people and the Portuguese Government so lack an 
understanding of the need for physical and personnel security measures 
necessary for safeguarding classified information that even if technically 
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sound COIBBC materials irere provided then, there would be no assurance 
that the U.S.S.R. could not obtain those materials by clandestine means, 
thus obviating their need for cryptanalysis of Portuguese communications . 

h. In the absence of exact knowledge of the practices which now 
apply (1) to the use by NATO holders of TYPE! and its associated crypto- 
materials and (2) to the various types or categories of NATO or national 
classified information which may be encrypted by TIFEA, there is no 
assurance that ail available and authorised ways and means have been 
applied toward a solution of this problem. 

1. In view of h above neither (1) the extent of the present danger 
to classified information of NATO and the U.S. which is inherent in the 
insecurity of Portuguese communications nor (2) the general insecurity of 
the Portuguese Government would justify exceptional, direct action toward 
i m pro v ement of Portuguese communications security at this time. 

RECOMMENDATIONS 

A. It is recommended that: 

a. The conclusions of this study be approved as the present USCIB 
view with regard to the problem, 

b. The U.S. Delegation to the U.5.-U.K. Conference on French commu- 
nications security be continued as an ad hoc body to ascertain the exact 
extant to which present NATO practices may provide secure ways and 
means, within the framework of these practices, to solve the Portuguese 
problem. 

e. Farther consideration of exceptional, direct action to improve 
Portuguese communications security be deferred pending completion of 
the study recommended under jt> shove and NSC and USCIB decisions 
whether such action ie to be taken vis-a-vis the French Government. 
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FACTS BEARING ON THE 



DISCUSSION 



STATEMMT 



1, Intelligence may be derived from crypto-camunicationa by any or all 
of the f allotting methods: 

a. By obtaining physical possession of the exact texts or the 
substance of the comunleatians (hereafter called Method 1 ); 

b. By obtaining physical possession of the crypto-material (key- 
lists, code books, etc.) necessary for direct reading of the intercepted 
traffic (hereafter called Method 2 ); 

c. By interception and cryptanalysis of. the communications (here* 



after called Method 3). 



PL 86-36/50 USC 3605 
EO 3.3(h) (2) 



2. With respect to intelligence derivable from present Portuguese com- 
munications, the U.S.S.R. is in a position to employ all three methods. 

Denial of 

Methods 1 and 2 to the U.S.S.R. sill depend ultimately upon physical security 
as sell as the reliability and discretion of those who are responsible for 
handling and safeguarding classified information in the Portuguese Govern- 
ment, and especially in the Cryptographic Service of the Portuguese Ministry 
of Foreign Affairs. (&.F.A.). 

EO, 3.3(h) (2) 
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4. The cryptosystems used fay Portuguese military and naval attaches 

i 

employ the Hagelin C-38 cipher machine. Since this machine and its usage by 
other agencies of the Portuguese Government will be treated be loir, no further 
remarks on this phase of the problem will be mode in this section. 

5. It is true that Portugal has furnished a contingent of troops to the 
U.N. for service in Korea but no information is available at this time 
regarding the communications of these Portuguese farces in Korea, what crypto- 
systems they are using, if any, and hoar they are being used. 

PCRTOOUESE DIPLOMATIC COIMJNICATIOHS 

6. There is unquestionable technical evidence that the cryptographic 
systems and practices recently and currently employed by the Portuguese 
Government in its diplomatic and colonial corammicationa are such that prac- 
tically all of those communications, if intercepted, could be read by any 
properly staffed and equipped communications Intelligence (COMINT) organ- 
isation. 

7. The naivete of the Portuguese with regard to caanunlcationa security 
is quite evident tr am their laxity in regard to the physical protection of 
crypto-materials; their ignorance of cryptologic techniques is established 
by very faulty cryptographic practices in connection with use of their own 
national ciphers as well as of the TYPE! machines furnished them fay the 
British for NATO communications . 

8. a. Some almost incredible breaches of security in the use or handling 
of Portuguese crypto-materials have been reported by Portuguese diplomats 
themselves and although these incidents were attended to by the Foreign 
Ministry in due time, these cases indicate only too clearly that Portuguese 
diplomatic personnel are not well indoctrinated in the handling of classified 
material. 

$ 
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b. The instructions in the prefaces of available Portuguese code 
boohs contain no general precepts on the subject of security. Although sane, 
of their cryptographic systems are fundamentally and potentially good, these 
are made vulnerable either through misuse or through compromise. Almost 
every type of violation in the gamut of CGMSEC insecurity practices is to be 




an unwarranted faith in the inviolability of their own national systems and 
involves a clearly stated suspicion that all Portuguese messages enciphered 
fay TTPEX will be available to the British. 

e. The foregoing statements are supported fay evidence given below. 

FQKTOGBESB ATTITUDE TOWARDS SECURITY OF CRYPTO-MATERIALS 

9. Some almost incredible breaches of security have been reported in 
recent years by Portuguese diplomats in important European poets. The 
Ambassador in London, in January 1950, discovered a discrepancy between 
inventories of 1%3 and 1946, and found no record of the disposition of 
missing cipher material. TVo years elapsed before the Portuguese J&nister 
in Bern informed Lisbon that cipher material was missing as a result of 
robbery. ’Verst of all was the case of the Portuguese Minister to Copenhagen, 
who left hie codes with the Brasilian Ambassa d or during a trip to Lisbon. 

10. It is true that these incidents received official attention: the 
Minister at Bern waa promptly relieved; the Copenhagen codes were quickly 
retrieved; and the Ambassador in London proposed suitable changes in proce- 
dure. Nevertheless, these eases indicate only too clearly that Portuguese 
diplomats are not well Indoctrinated in the handling of classified material. 
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13. a. There are sound Indications that the Portuguese are nary of using 
TYFEX because they fear that their traffic trill be readable by the British, who 




b. Such a fear is not unfounded when consideration is taken of the 



failure on the part of tin Portuguese to avail themselves of the possibilities 
provided by NATO arrangements for the use of TYEEX in purely national coaau- 
nicaticns, by means of keys and machine settings compiled by each nation 
itself, rather than by means of those provided by the British. 

PL 86-36/50 USC 3605 
EO 3.3(h) (2) 
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e. Failure to compile their own keys and machine settings leads the 
Portuguese/ 



This practice, if continued, will be most detrimental to the 

security of NATO classified inf creation. 

PL 86-36/50 USC 3605 
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14. There is no evidence that the Portuguese make any concerted effort to 
monitor their asm communications fbr the purpose of observing or controlling 




15. There appears to be no tradition of COMINT in Portugal, and only one 
book on the subject Is of Portuguese origin, written about 60 years ago. 
Although recent and usually reliable information indicates that there exists 
within the International and State Security Police, Policia Lstemacional e . 
da Defeaa do Eetado (FIDE), a section which is concerned with communications 
as well as with cr y p t ogr a phy and esyptanalysis, it certainly cannot be active, 
or well informed, or in a position to bring about Improvement in Portuguese 



14, Except for the fact that "Listening (interception and monitoring)” 
is listed as a source of information for the Portuguese Army Intelligence 
Section (3a Reperticao), there is no information on the cryptologic activities 
of the Portuguese Ittnistriea of the Army and Navy. 







17. a. From the strictly military standpoint, there is little question that 
Portuguese traffic pores ants the greatest problem to NATO security. The 





sensitive NATO policies, decisions, and information* However, the situation 
might become more serious as NATO develops, the Portuguese receive mors extensive 
and more sensitive Information, and become more involved in NATO affairs. 

CONSIDERATIONS AS TQ PnRTtrJTKSE INTEBNAL SBCHUTT 
21* It Is obvious that even if technically sound cryptosystems and associated 
procedures ware employed by or fixrniabed the Portuguese by the U.S., it is still 
necessary to insure that another government,, and especially the U.S.S.R., could 
not obtain copies of the crypt cmaterlals employed for those systems, because 
such an out aide go v er nment is then obviously in a position to obtain the classi- 
fied information by applying Method 2 (see paragraph tt above)* Therefore, this 
report most consider the Portuguese situation from this point of view* 

. 22, Appendix 1 to this enclosure deals with the status of Portuguese internal 
security* It indicates very clearly that the Portuguese people and the Portuguese 
Government so lack an understanding of the need for physical and personnel secur- 
ity measures necessary for safeguarding classified information that even if 
technically sound C01SEC materials were employed by them, or provided them fay the 
U.S., there presently would be no assurance that the U.S.S.R. would n&t obtain 
those materials, thus obviating any nesd on their part to obtain Portuguese 
classified information fay Method 3, 






23. Consideration could be given to an approach to the Portuguese Government 
with a view toward improving the security of its communications, Just as is now 
being considered in the case of the French Government, This however, ie premature, 
since no decision has yet been made by the National Security Council in regard to 
the proposed approach to the French Government. 

24* At its sixty-fifth meeting, on 22 June 1951, USCXB "explored the possibility 
of instituting safeguards in the farm of a note to recipients of sensitive NATO in- 
formation, stating that before information is released there must be assurances 
that It will preferably not be forwarded by any electrical communication means} 
but if necessary to forward, that secure courier service would be utilised." How- 
ever, before making a recommendation along these lines to NATO governments it 
would be necessary to study the practicability of instituting such a safeguard 
by all the NATO members. Such a study would require considerable time by the 
Security Coordinating Committee of the Standing Group of the NATO Council, 

25a Detailed information is as to the practices which now apply (a) 

to the usage being made, by NATO holders, of TXPffl and its associated crypto- 
materials, and (b) to the various types or categories of NATO or national clas- 
sified Information which may be encrypted by TIP EL. There is therefore no as- 
surance that all available and authorized ways and means for attaining COMSEG 
have been applied toward a solution of the problem of insecurity of Portuguese 
communications. Such detailed Information would probably be veiy useful In de- 
vising remedial measures, within the framework of pre s ent authorized procedures, 
which might materially assist in rectifying the situation as regards the insecur- 
ity of Portuguese communications, as well as of those of certain other NATO 
governments. 

26. In connection with the subject of possible remedial measures, attention 
ie invited to the fact that such measures are also being currently studied by 
the Security Coordinating Committee of the Standing Group of NATO*. In particular, 
the following action ie being considered fay that Conmittee: 

KO 3.3(h) (2) 
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"So It is submi' 



te 



necessary: 
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(a) To ensure that when type* Mark H machines have been issued, 
they are brought into use with the least possible delay • 

(b) Since the Council of Deputies was set up after the allocation 
of type* Mark II machines, (SGtf-200-50 of 20th July, 1950), to 
draw the Council of Deputies 1 attention to the regulations 
regarding cryptographic channels in order to determine whether 
the allocation is sufficient to meet their requirements,, 

(e) To issue further guidance to NATO agencies, making it clear 
that telegraphic traffic involving not only 'Cosmic 1 interests 
but also other ccnmunicatlcns related to North Atlantic Treaty 
Interests must be sent fay the approved cypher system,, R 
"BBCOMUflfDATIQN 

"9o That action should be taken along the lines of paragraph 8 above,," 

27. Until idle foregoing possibilities for remedial measures have been ex- 
plored, a direct approach to the Portuguese Government ie not indicated and 
would be aradae,. 
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Maagragriga on Portuguese Internal and Personnel Security 

1. The Portuguese Government places security emphasis on safeguarding 
the Regime as a political entity. Da so doing, machinery for the protection 
of classified information in the hands of politically reliable persons is 
virtually ignored. The instrument used by the government to check political, 
reliability is the international and State Security Police ( Policia 
Intemacional e de Defesa do Estado - PXDE) . Besides its routine duties of 
border control and control of movement of foreigners in Portugal, the PIDE 
places informants in Government departments and into opposition groups 
including the Communists. The main emphasis in PIDE activity is placed on 
the suppression of internal subversive elements. 

2. The PIDE reports that it is placing effective curbs on the Portuguese 
Communist Party (PCP). By action taken in late 1950, the PIDE claims to have 
reduced the membership of the PCP from 4,500 active members and 7,000 
sympathizers in 1949 aid 1950 to 2,500 active members and 5,000 sympathizers 
in early 1951. There is no supporting evidence to serve ae a check against 
the PIDE claims. 

3* The Communist Party of Portugal is considered illegal; therefore no 
measure of its strength is available. Its effectiveness In evading police 
action ms demonstrated by the inability of the PIDE to capture the Secretary 
General of the PCP, Dr. Alvaro CUNHAL. CUTJHAL ms finally arrested in 
Ibrch 1949 after having been hunted by the PIDE for more than three years. 

A comment fay a PIDE inspector, in September 1948, 

perhaps explains CDNHAL's ability to elude the HIDE. The Inspector 

said that he ms reasonably sure that there were communist agents in the 
ranks of the PIDE. More recent success on the part of the PIDE in neutraliz- 
ing communist activities in Coimbra and in the capture of a leading Central 
Committee member could indicate that possible leaks from the PIDE to the PCP 
had been eliminated. 

EO 3.3 (h) (2) 
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1». The FIDE thoroughly investigates all potential PIDE recruits. After 
recruitment, the new member is held on probation for one year. After the end 
of the probationary period, spot checks are node on the permanent members, 

5. The PIDE is lax in the physical security of its premises. Entrance 
past a door guard is usually easily made. Before entering the interior 
restricted area, . a visitor has to fill out a form at a guard desk indicating 
who he is and the nature of his business. However, once he becomes known, a 
visitor, even if a foreigner, can pass from the guard desk to one of several 
waiting roams unattended. Papers frequently are left on desks of empty 
offices in the restricted area. The Portuguese seem to take it for granted 
that the visitor would not be present unless he had a right to be there. 
Identification passes are not required of employees. There is no evidence 
that there is any greater emphasis on security in other go v e r n m ent departments. 

6. The Portuguese Foreign Office and Portuguese Defense establishment 
show an attitude toward Spain that clearly reflects the concept that the 
destinies of Portugal and Spain are immutably linked. This concept has led, 
according to unconfirmed reports, to the submission of reports acquired by 
the Portuguese government as a member of RATO to Spanish authorities. In an 
August 1950 interview. Prime Minister SAUZAR stated that "Portugal's 
contribution to Europe's security hinged on the role to be played by Spain." 

In this connection. Defense Minister, Lt. Col. SANTOS COSTA, frequently 
confers with Spanish authorities on the question of the defense of the Iberian 
Peninsula. 

7. The temper of the Portuguese people, a garrulous group in a country 
where security has been no problem, does not lend itself to restrictions 
followed in countries where the presence of an enemy is more acutely felt. 

S. Even when the presence of an eneay is pointed out, the Portuguese 
Government appears to take a benevolent rather than a severe attitude in 
meeting the threat. This attitude is indicated in the Government's treatment 
of the PCP. TOien CUNHAL came to trial, as a member of a supposedly outlawed 
political group, the judge hearing the ease gave a comparatively light sentence 
on grounds that Portuguese law failed dearly to place the Party in an illegal 
status. 
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9. v.’hile the potential of the POP to acquire information through infil- 
tration of the Government is great, there is no evidence to shoe that the 
Party is properly organised to make the most of this advantage. 

10. The relationship of Portugal to Spain la such that there would be 
little moral compunction on the part of the Portuguese to deter them from 
giving military and political secrets to the Spanish. This is particularly 
true if the Portuguese felt that by such action they would further the case of 
security of the Iberian Peninsula. 

11. To summarize, the Portuguese people and the Portuguese Government so 
lack an understanding of the need for physical and personnel security measures 
in regard to the safeguarding of classified information that a hazard exists 
in providing them with such information. If that Government is to function 
properly in its role ae a member of the North Atlantic Treaty Organisation, it 
appears clear that measures will have to be taken to indoctrinate the Portuguese 
on security practices required in the handling of classified information which 
la either already in their possession or which may be given to them in the 
future. 
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